Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/db249113-d187-3685-b1cd-e35d0bc9ece7.roa
File:                     db249113-d187-3685-b1cd-e35d0bc9ece7.roa (raw, json)
Hash identifier:          HutiFlUPx5cjiDvq1DkAjlotcNkTNoAFVN339K8hy30=
Subject key identifier:   42:85:B7:67:4F:E7:8C:C7:AB:F9:66:F4:3A:2E:F1:99:2D:99:19:92
Certificate issuer:       /CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
Certificate serial:       010D0C9F43285845C0138C284C123CA85AA51800
Authority key identifier: 54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/db249113-d187-3685-b1cd-e35d0bc9ece7.roa
Signing time:             Fri 03 May 2024 13:00:34 +0000
ROA not before:           Fri 03 May 2024 13:00:34 +0000
ROA not after:            Thu 01 Aug 2024 13:00:34 +0000
asID:                     715
IP address blocks:        216.21.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:13:8c:28:4c:12:3c:a8:5a:a5:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
        Validity
            Not Before: May  3 13:00:34 2024 GMT
            Not After : Aug  1 13:00:34 2024 GMT
        Subject: CN=645c2563-87d3-45b5-9e9b-519f32cbad95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d4:34:9f:ba:77:b0:a1:4c:dd:4b:b0:d4:93:
                    6c:eb:b3:94:13:ec:7a:b0:fd:05:a5:e9:cd:05:5d:
                    5a:db:14:ad:27:b4:db:00:4e:b1:1d:6b:55:b8:33:
                    ef:21:c9:5a:4e:da:d3:a7:70:49:e6:f6:3a:71:f9:
                    a2:77:78:a3:20:29:49:83:6b:c0:2f:b7:f5:87:15:
                    ee:6e:b8:0a:9b:81:2d:c6:af:b9:21:cd:26:74:21:
                    f7:5f:54:76:ef:ac:0b:9d:5a:79:66:99:28:90:ab:
                    11:7d:43:8d:d9:41:c4:b8:4f:88:4f:12:45:99:34:
                    1e:04:c4:a9:20:71:81:cf:3d:f9:66:db:e5:73:7d:
                    3e:25:cf:11:57:88:08:90:8d:ca:67:b6:58:c1:ff:
                    5c:45:e3:f8:72:72:21:8e:75:dd:a9:40:5a:97:1d:
                    5a:52:92:16:5d:43:38:3a:6a:54:ec:e1:09:8b:94:
                    ad:d7:43:ba:e3:7c:ef:d3:eb:6e:8c:8b:b2:3d:89:
                    0b:6b:9f:8e:52:83:67:38:7e:e5:4c:c0:75:c3:3c:
                    be:06:ff:7a:4c:33:01:fd:0b:34:91:ea:49:88:6e:
                    e4:b2:bc:2a:82:d8:ea:18:69:62:52:d4:d0:85:9d:
                    10:64:6a:84:72:7c:d6:85:59:79:d8:8e:f1:15:6b:
                    58:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:85:B7:67:4F:E7:8C:C7:AB:F9:66:F4:3A:2E:F1:99:2D:99:19:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/db249113-d187-3685-b1cd-e35d0bc9ece7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl

            X509v3 Authority Key Identifier:
                keyid:54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.21.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:ae:cd:40:37:55:7c:bf:76:4e:f7:a2:76:e2:57:54:be:bb:
         3b:1d:28:6b:9c:03:6b:68:35:2f:5e:2f:bc:a1:30:d4:d5:44:
         7d:5b:e7:49:69:b5:ae:33:e7:2d:1e:c5:f7:12:a9:ec:58:a8:
         0a:47:63:6a:9d:b3:93:f6:dd:8b:fe:ef:6c:70:1d:f5:00:58:
         88:7f:80:22:0c:8c:09:62:2a:df:14:ce:52:0e:8a:86:a1:84:
         ed:d7:cf:7d:ba:d5:96:89:66:89:e3:86:45:35:08:6f:c2:cb:
         ea:11:41:1b:d0:0c:be:e5:99:da:89:ae:07:f4:70:24:e6:af:
         39:ad:c7:44:3c:c6:e5:4f:21:33:4d:45:b1:44:bd:6d:f3:db:
         40:61:31:4c:bd:c0:e8:0a:f2:40:39:df:68:e1:e7:10:54:57:
         3b:40:c8:e3:d4:f2:5c:2c:91:be:a8:62:e5:1e:37:8c:2c:51:
         03:3e:81:38:f0:c5:ae:a3:36:0c:a5:3b:9b:bf:02:39:d6:a9:
         80:8d:2b:ff:bb:59:03:48:b7:3b:4e:6f:a6:af:e8:bb:91:6b:
         9e:bb:e7:38:9a:6b:0a:5b:4f:9d:c8:46:3c:30:81:32:09:fb:
         29:82:8a:62:7f:4d:af:bb:3c:cd:66:83:f0:bc:43:6e:39:e0:
         d6:c1:7c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 00:38:34 2024 by rpki-client on console-ams.rpki-client.org